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Semiconductor device, carrier and method of manufacturing a semiconductor' 

OT04Rec:dPCT/PT0 2 1 SEP 2004 



The invention relates to a semiconductor device comprising a substrate with a 
first side, at which first side a plurality of transistors and interconnects is present, which are 
covered by a protective security covering, which device is further provided with bond pad 
regions. 

5 The invention also relates to a carrier comprising a semiconductor device. 

The invention further relates to a method of manufacturing a semiconductor 
device provided with a substrate with a first side, comprising the steps of: 
- providing a structure of transistors and interconnects at the first side of the substrate, the 
stracture including bond pad regions; 
10 - applying a protective security covering; and 

patterning the protective security covering from the first side so as to expose the bond pad 
regions. 

Security issues are becoming increasingly important aspects in semiconductor 
15 design and deployment particularly as the amount and range of potentially sensitive 

commercial and/or personal information that can be stored by, and transferred between 
electronic devices increases. Smart cards comprise one such form of electronic device in 
which it is essential to attempt to protect against invasive procedures such as attempted 
tampering with the integrity of the integrated circuit device, and procedures involving reverse 
20 engineering and exposure to radiation. 

Security coatings for integrated circuit devices have been used in an attempt to 
improve the physical integrity of, for example, integrated circuit devices found on smart 
cards, by seeking to restrict the manner in which information held by the integrated circuit 
device can be accessed or modified. 
25 One such level of protection designed by Schlumberger is referred to as 

Sishell. The process steps adopted by Schlumberger in the provision of its Sishell protection 
process requires the processing of the active devices, i.e. the integrated circuits within the 
smart card, to completion in a manner such that a passivation layer is located as required and 
the required bond pads are opened through the passivation layer. A layer of bare silicon is 



PHNL020251 




2 20.03.2002 
then glued over the upper surface of the integrated circuit and the silicon layer is provided 
with apertures, which are located so as to correspond with the locations where the bond pad 
openings within the integrated circuit are found. The stack comprising the integrated circuit, 
glue layer and silicon layer is then thinned by processing of the undersurface of the silicon 
5 substrate of the integrated circuit so as to achieve a required total thickness. In this manner, 
the integrated circuit side of the stack also becomes very sensitive and prone to damage and 
breakage if an attempt is made to lift off the silicon layer from above the passivation layer by 
mechanical means. However, insofar as the protective silicon cover layer is etched and 
pattemed with regard, in particular, to the bond pad openings, such layer is 

10 disadvantageously prone to becoming etched and removed and this limits its integrity of 

security. Also the sensitivity to breakage of the integrated circuit can readily be overcome by 
fixing the integrated circuit to, for example, a sapphire substrate. Also, the stack structure 
formed is not sufficiently dense so as to prevent damage through infrared radiation and, 
somewhat further disadvantageously, silicon generally exhibits a transparency to infrared 

15 radiation, so that the underlying structures can then be observed. 

Known process of this type are therefore disadvantageous in that the 
semiconductor device formed is provided with a security coating that only enhances the 
security of the device to a disadvantageously limited degree. 

20 It is therefore a first object of the invention to provide a semiconductor device 

of the type mentioned in the opening paragraph which has a substantially enhanced security. 

It is a second object to provide a carrier with the semiconductor device of the 

invention. 

It is a third object of the invention to provide a method of manufacturing a 
25 semiconductor device of the kind mentioned in the opening paragraph, which exhibits an 
advantage over known such methods. 

The first object is realized in that the protective security covering comprises a 
substantially non-transparent and substantially chemically inert security coating, and that the 
30 bond pad regions are accessible from the second side of the substrate. 

As there is no need in the device of the invention to etch or pattern the 
protective security covering for bond pad access, it is possible to employ one, or a 
combination of, near chemically inert material layers in the security covering. Therewith it 
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becomes almost impossible to polish the security covering, which greatly enhances the 
protection offered. 

Although it might appear at first sight that the semiconductor device of the 
invention is at its second side open to probing and to detect any structures, this is not true or 
5 the problem can be solved. First of all, the bond pads can be protected by antiprobing means. 
This is not different from the prior art situation. Such antiprobing means can be of a software 
nature, a hardware nature or a combined hardware/software nature. For example, it can be 
prescribed that a signal should have a specific pattern and altematively is directly connected 
to a ground plane. 

10 The bond pad regions can be accessible to the second side of the substrate in 

various manners. It is preferably that the substrate is thinned and locally etched. This option 
is very suitable for silicon substrates. After the etching of the substrate bumps can be 
provided at the bond pad regions. Altematively, the etched windows can be filled with metal, 
for example by electroplating. 

15 In the preferred case that the substrate is a silicon substrate, the substrate with 

its dense packing of transistors offers a security in itself. The packing is here at its most dense 
in view of the transistors, preferably field-effect transistors, and contact plugs found therein. 
Any attempt to reach such stmctures will immediately result in damage to the junctions and 
to any thin gate oxides such that the integrated circuit device will not then function. In 

20 addition, it is almost impossible in practice to successfully probe sub-half-micron devices. 
Besides, in order to modify the pattern and data implemented in a semiconductor device, it 
are not only the individual transistors and other semiconductor elements that are vulnerable 
to attack, but also the circuit as implemented in the interconnect pattern. The dense packing 
of transistors effectively shields this circuit from the second side. 

25 Nevertheless, a security layer can be provided at the second side of the 

substrate, which security layer leaves exposed the bond pad regions or any metallisation for 
access thereto. This option can be used with silicon or other semiconductor substrates. It is 
however in particular preferred in the case that the transistors are of the thin-film type that are 
present on an insulating substrate. Such a structure will have the advantage of flexibility, and 

30 is therefore very suitable for integration in flexible carriers, such as banknotes, other security 
papers, labels and tags. Further on, in the case of an insulating substrate with thin film 
transistors, the insulating substrate can be or contain a security layer or could be replaced by 
a security layer after processing if so desired. 
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In general, the protective security covering will contain a passivation layer to 
protect the underlying structure from any disadvantageous or contaminating influences of the 
security coating. It is further on preferred that an adhesion layer is present between the 
passivation layer and the security coating. A preferred example of such passivation layer is a 
5 layer of Ti02, which is chemically inert, closed and non-porous. 

The security coating can contain a layer with a matrix of 
aluminummetaphosphate. Such a layer that is generally filled with particles such as TiN and 
Ti02 has as advantages of being chemically inert, non-transparent to radiation, relatively 
hard and brittle, and difficult to polish. It is preferably made from a precursor material, such 

10 as A1(H2P03), or monoaluminumphosphate. This material is converted to 
aluminummetaphosphate in an anneal. 

Alternatively or in addition thereto, the security coating is formed of multiple 
alternate layers, which alternate layers are sensitive to different etchants. Particularly 
preferred is a combination of alternate W and Al containing layers. The combination of such 

15 metals such as those defined proves to be particularly difficult to etch and polish, particularly 
by chemical mechanical means. This arises since Al does not etch in W etchants and vice 
versa. Also, when considering polishing such a structure, it will be necessary to change from 
one polishing pad to another every time each of the different layers is expected at the surface 
otherwise integration of the respective polishing pads is likely to become compromised and 

20 the pad damaged. However it should be appreciated that the basis of such a layer structure is 
W and then any metal that adheres to W and does not etch in H202/NH4OH or fluorine- 
containing plasma. The use of Al containing layers is particularly advantageous in allowing 
for ready handling and processing of the semiconductor device in an efficient manner. 

In general, it will be understood that the security is most enhanced therewith 

25 that the security coating is unpattemed. However, there may be applications in which it is 
preferred to have patterning at both the first and the second side. Such an application arises 
for example with devices, that are capacitively coupled to an antenna stracture that is present 
in the carrier, which is disclosed in the non-prepublished application with number 
EP00203298.5. In this case the capacitor electrodes can be provided on the first side and on 

30 the second side of the integrated circuit, whereas there is nevertheless an adequate security 
protection through the security coatings. A suitable security coating that can be patterned, is 
for example based on a matrix of monoaluminumphosphate. Patteming thereof may be done 
with a lift-off process. 
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The second object of a carrier with improved security is achieved in that the 
carrier comprises the semiconductor device of the invention. The carrier can be a smartcard, 
but may further be a tag, a label, a security paper including a banknote, or even a record 
carrier such as an optical disc. As stated above, the record carrier may contain an antenna 
5 stmcture that is capacitively or with contact coupled to the semiconductor device. 

The third object of an improved method of manufacturing a semiconductor 
device provided with a substrate with a first and second side is realized in that it comprises 
the steps of: 

10 - providing a structure of transistors and interconnects at the first side of the substrate, the 
structure including bond pad regions that are defined at an interface with the substrate; 
applying a protective security covering including at least a substantially non-transparent 
and substantially chemically inert security coating; 

patterning the substrate from the second side so as to expose the bond pad regions. 

15 Processing the semiconductor device structure in this manner proves 

particularly advantageous in that, since the silicon substrate is effectively etched from 
underneath, there is no need to etch or pattern the protective coating for bond pad access and 
so it then proves possible to employ one, or a combination of, near chemically inert material 
layers for the security coatings, for bond pad access, since they do not subsequently have to 

20 be patterned. Such a requirement for patterning in the prior-art is disadvantageous. 

Preferably, the substrate is a silicon substrate that is first thinned, for example 
by grinding or chemical-mechanical polishing and then locally etched. Etching means include 
KOH. 

In a most preferred embodiment, a second substrate is provided on the 
25 protective security covering and attached to it by means of glue. Such a technique is also 
known as substrate transfer, and is per se known, for example of US-A 5,689,138. The 
second substrate may contain any material, and is preferably providing mechanical support 
for the structure. Suitable materials include glass, aluminumoxide, silicon, epoxy, and the 
like. Preferably the glue layer has a thickness of some micrometers wherewith any 
30 unequalness in the surface of the protective security covering is overcome. Alternatively, an 
additional planarizing layer may be provided on top of the security covering. 



The invention is described further hereinafter, by way of example only, with 
reference to the accompanying drawings in which Figs. 1-8 comprise cross-sectional 
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illustrations of the formation of a semiconductor device with a protective security covering 
formed thereon. Same reference numbers refer to like elements in the drawings. The 
drawings are diagranmiatic and not on scale. 

Turning now to the drawings. Fig. 1 illustrate an initial silicon substrate 10 
with a first side 1 and a second side 2. The substrate 10 comprises a completed integrated 
circuit wafer stmcture including a passivation layer 12 in which projected bond pad regions 
14. For reasons of clarity any interconnect layers that are present on the substrate 10 have 
been omitted in the drawings. It is however to be understood, that the bond pad regions 14 
are present at the interface with the silicon substrate 10, or such that they can be exposed 
from the second side 2 of the substrate 10. This is contarily to the location of the bond pad 
regions in the prior art, wherein they were present in the top of the interconnect structure, and 
before being exposed, only being covered by the passivation layer 12. As will be understood 
by any skilled person, the bond pad regions are such defined, that there is no overlap with the 
transistors on perpendicular projection of the bond pad regions on the substrate. 



security coatings 16 is deposited upon the passivation layer 12, the process of the present 
invention being such that there is no need to etch nor pattern the security coatings 16 and 
there is no need at this stage for the bond pad regions 14 to be opened. The passivation layer 
12 may be omitted, but is preferably present. The plurality of security coatings forms the 
protective security covering. 



comprises a Ti02 layer 18, a coating layer 20 based on monoAluminiumPhosphate (MAP) 
filled with particles of Ti02 and/or TiN, and subsequently a multi alternating layer structure 
22 formed of Al and W layers respectively. 



illustrated in Fig. 2, a substrate 24, which can be in the form of a silicon wafer substrate or a 
glass substrate such as AF45 is attached by means of a layer of glue 26 to the upper surface 



As illustrated in Figs. 3 and 4, and by means of a substrate transfer process, 
the structure is then manipulated and processed in a manner so as to thin the silicon substrate 
10 by action against the underside thereof. 



In accordance with one particular aspect of the present invention, a plurality of 



With regard to Fig. 2, the security coatings 16 in the illustrated example 



Subsequent to the coating of the substrate passivation layer structure as 



of the protective coatings 16, and as shown in Fig. 3, 
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The underside of the structure illustrated in Fig. 4 is then manipulated and 
processed by means of, for example, a KOH etch at the regions 28 where the bond pads 14 
are projected so as to arrive at the structure as illustrated in Fig. 5. 

Figs. 6 illustrates the structure of Fig. 5 once inverted and the portion 7 
5 illustrated in Fig. 6 is shown in greater detail in Fig. 7 which serves to illustrate a nitride layer 
30 provided above the bond pad opening and also part of the semiconductor circuitry 32 
provided under the thinned silicon substrate 10 which in accordance with the illustration of 
Fig. 7 is now oriented above the structure. 

A selective etch is then conducted so as to arrive at the structure as illustrated 
10 in Fig. 8 which allows for subsequent testing and packaging of the integrated circuit device as 
required. 

As will be appreciated particularly from Figs. 6-8, the employment of a 
substrate transfer technique in accordance with this illustrated embodiment of the present 
invention proves particularly advantageous in that it allows for the ready processing of the 
15 structure in an manner so as to allow for the provision of security coatings formed of 

substantially inert materials. Also in providing for openings to the bond pad regions through 
the thinned semiconductor substrate, an appropriate degree of protection due to the density of 
device structures provided therein is provided and which serves to prevent access to the 
underside of the structure without fatal damage to the device. 



